CERT24RHSA-2026:99049 — Red Hat Security Advisory: oci-seccomp-bpf-hook security updateLoading data…
CERT24Threat Observatory
Period

RHSA-2026:99049 — Red Hat Security Advisory: oci-seccomp-bpf-hook security update

The source describes two flaws involving Go packages. In Go net/http, an HTTP request with a large number of small byte ranges in the Range header can cause excessive CPU consumption and denial of service. In Go crypto/x509, certificate verification may fail to block trust in intermediate certificates associated with a compromised certificate authority, enabling server impersonation and interception or alteration of communications.

← Back to intelligence

RHSA-2026:99049 — Red Hat Security Advisory: oci-seccomp-bpf-hook security update

The source describes two flaws involving Go packages. In Go net/http, an HTTP request with a large number of small byte ranges in the Range header can cause excessive CPU consumption and denial of service. In Go crypto/x509, certificate verification may fail to block trust in intermediate certificates associated with a compromised certificate authority, enabling server impersonation and interception or alteration of communications.